Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SS6nRb2OXAHMxEX1lGhW6-zK_dA.roa
File: SS6nRb2OXAHMxEX1lGhW6-zK_dA.roa (raw, json)
Hash identifier: yl6HaFIeFTfSsNPzB6L/gjnRZlLSALskA1STJxa8CGQ=
Subject key identifier: 49:2E:A7:45:BD:8E:5C:01:CC:C4:45:F5:94:68:56:EB:EC:CA:FD:D0
Certificate issuer: /CN=c9d57447e3420b853875b6fa40372aade3192ca2
Certificate serial: 01867B84B4DEAF609DE9CAA245BA73C50B89
Authority key identifier: C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SS6nRb2OXAHMxEX1lGhW6-zK_dA.roa
Signing time: Wed 22 Feb 2023 23:45:39 +0000
ROA not before: Wed 22 Feb 2023 23:45:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61135
IP address blocks: 188.132.236.0/24 maxlen: 24
212.68.35.0/24 maxlen: 24
188.132.249.0/24 maxlen: 24
212.68.60.0/24 maxlen: 24
212.68.59.0/24 maxlen: 24
188.132.189.0/24 maxlen: 24
188.132.191.0/24 maxlen: 24
78.135.73.0/24 maxlen: 24
188.132.193.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Apr 2023 15:34:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7b:84:b4:de:af:60:9d:e9:ca:a2:45:ba:73:c5:0b:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d57447e3420b853875b6fa40372aade3192ca2
Validity
Not Before: Feb 22 23:45:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=492ea745bd8e5c01ccc445f5946856ebeccafdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a9:a1:c4:80:df:3f:ed:c9:32:3b:1f:00:db:
8c:fc:59:e1:59:16:15:a1:4d:90:50:f5:42:25:28:
e9:50:88:71:8c:7c:fc:03:76:13:13:8a:a9:8d:80:
62:47:57:8c:28:1b:0d:86:13:50:d9:67:a2:8c:25:
4c:9c:b9:ec:9a:c8:26:13:46:81:dc:15:f3:cb:42:
1e:74:8c:53:0d:ae:9c:6e:62:af:d7:23:19:2c:97:
cb:ac:f8:ae:7b:3f:10:64:13:54:11:5d:ac:16:12:
e3:3b:2d:43:b9:18:a6:5e:c5:9e:56:8f:1f:5a:d1:
10:0c:b9:3e:57:96:72:7d:25:e7:10:e8:d6:e5:d3:
ec:ec:1f:1f:24:0f:8d:3d:46:6b:80:11:72:a2:35:
f9:f1:84:7e:2c:7a:3b:25:2a:2b:62:7e:f8:68:6d:
41:01:ca:ce:79:af:e6:48:03:cc:63:79:57:78:3c:
88:87:e7:dd:88:51:13:ab:86:1f:d1:be:e7:04:b0:
e5:90:6c:16:c9:31:41:41:d4:4b:e3:e9:23:47:f3:
0e:41:68:7b:e2:de:2d:15:dc:b9:f8:73:55:85:e6:
05:bb:cf:9f:5e:90:a7:f5:4d:27:44:80:f9:c0:79:
51:47:ab:41:e5:03:68:07:46:d0:7c:45:3b:c3:55:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:2E:A7:45:BD:8E:5C:01:CC:C4:45:F5:94:68:56:EB:EC:CA:FD:D0
X509v3 Authority Key Identifier:
keyid:C9:D5:74:47:E3:42:0B:85:38:75:B6:FA:40:37:2A:AD:E3:19:2C:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydV0R-NCC4U4dbb6QDcqreMZLKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/SS6nRb2OXAHMxEX1lGhW6-zK_dA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/1586fd-fd2c-41f8-8fe9-4e198f0a6013/1/ydV0R-NCC4U4dbb6QDcqreMZLKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.135.73.0/24
188.132.189.0/24
188.132.191.0/24
188.132.193.0/24
188.132.236.0/24
188.132.249.0/24
212.68.35.0/24
212.68.59.0-212.68.60.255
Signature Algorithm: sha256WithRSAEncryption
a4:18:42:23:5b:da:89:ff:1b:d3:ed:83:93:f2:4f:c3:dd:0e:
7c:3c:93:b3:99:67:ff:8c:42:79:cd:18:3c:6f:65:e1:d3:42:
03:76:4a:b4:61:1d:aa:5d:47:f5:eb:37:ec:fc:b6:85:bf:3c:
3d:f9:c2:c8:d6:e6:c6:a8:11:50:5c:13:5f:c7:ed:73:4a:5d:
84:be:36:c7:f8:e7:46:a6:61:b8:32:4e:1d:b7:25:8c:6b:90:
d3:cf:84:74:30:1d:64:6c:df:d2:05:1e:91:36:cb:ee:ea:85:
17:ca:50:05:9a:a9:c2:3c:0c:fc:28:80:66:60:af:79:65:0f:
6f:0c:f9:d3:16:0a:f9:db:b2:cc:3e:ea:de:56:42:50:79:4e:
f0:8b:3b:93:b2:22:95:4d:53:8d:29:41:ee:ab:c8:c7:50:96:
9a:23:7b:dc:67:a2:9f:b5:dd:44:1b:9f:00:58:ea:58:3e:aa:
40:d3:f1:04:0d:34:c5:7c:e4:0b:42:1a:51:17:30:49:d8:43:
d8:d4:09:af:f5:0d:b1:49:47:c6:ed:43:4d:ad:e3:cc:7a:bc:
62:5e:66:b8:eb:06:76:7f:1b:5f:26:6b:0e:eb:f7:fd:87:9a:
91:15:41:ad:3e:c0:40:52:4a:23:4f:ad:f3:53:76:e4:c2:7f:
0f:3b:5b:4f
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYZ7hLTer2Cd6cqiRbpzxQuJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5ZDU3NDQ3ZTM0MjBiODUzODc1YjZmYTQwMzcyYWFkZTMx
OTJjYTIwHhcNMjMwMjIyMjM0NTM5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OTJlYTc0NWJkOGU1YzAxY2NjNDQ1ZjU5NDY4NTZlYmVjY2FmZGQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApamhxIDfP+3JMjsfANuM/FnhWRYV
oU2QUPVCJSjpUIhxjHz8A3YTE4qpjYBiR1eMKBsNhhNQ2WeijCVMnLnsmsgmE0aB
3BXzy0IedIxTDa6cbmKv1yMZLJfLrPiuez8QZBNUEV2sFhLjOy1DuRimXsWeVo8f
WtEQDLk+V5ZyfSXnEOjW5dPs7B8fJA+NPUZrgBFyojX58YR+LHo7JSorYn74aG1B
AcrOea/mSAPMY3lXeDyIh+fdiFETq4Yf0b7nBLDlkGwWyTFBQdRL4+kjR/MOQWh7
4t4tFdy5+HNVheYFu8+fXpCn9U0nRID5wHlRR6tB5QNoB0bQfEU7w1WIlwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFEkup0W9jlwBzMRF9ZRoVuvsyv3QMB8GA1UdIwQY
MBaAFMnVdEfjQguFOHW2+kA3Kq3jGSyiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTkt
NGUxOThmMGE2MDEzLzEvU1M2blJiMk9YQUhNeEVYMWxHaFc2LXpLX2RBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC8xNTg2ZmQtZmQyYy00MWY4LThmZTktNGUxOThmMGE2MDEz
LzEveWRWMFItTkNDNFU0ZGJiNlFEY3FyZU1aTEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQATodJAwQA
vIS9AwQAvIS/AwQAvITBAwQAvITsAwQAvIT5AwQA1EQjMAwDBADURDsDBADURDww
DQYJKoZIhvcNAQELBQADggEBAKQYQiNb2on/G9Ptg5PyT8PdDnw8k7OZZ/+MQnnN
GDxvZeHTQgN2SrRhHapdR/XrN+z8toW/PD35wsjW5saoEVBcE1/H7XNKXYS+Nsf4
50amYbgyTh23JYxrkNPPhHQwHWRs39IFHpE2y+7qhRfKUAWaqcI8DPwogGZgr3ll
D28M+dMWCvnbssw+6t5WQlB5TvCLO5OyIpVNU40pQe6ryMdQlpoje9xnop+13UQb
nwBY6lg+qkDT8QQNNMV85AtCGlEXMEnYQ9jUCa/1DbFJR8btQ02t48x6vGJeZrjr
BnZ/G18maw7r9/2HmpEVQa0+wEBSSiNPrfNTduTCfw87W08=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:58 2024 by rpki-client on console-ams.rpki-client.org